Application software detection alarm method and device, electronic equipment and computer readable medium

Abstract

The embodiment of the invention discloses an application software detection alarm method and device, electronic equipment and a computer readable medium. A specific embodiment of the method comprises the following steps: performing state detection on application software of each user terminal to obtain a software detection data set; adding an application label corresponding to the installed application software in the feedback information to a software container; performing data feature processing on each piece of software detection data to generate a software data processing result set; and for each software data processing result in the software data processing result set, in response to determining that the software data processing result meets a preset early warning condition, executing an alarm operation on the user terminal and the application software corresponding to the software data processing result. According to the embodiment, the occupation of storage resources can be reduced while software alarm is realized.

Description

Technical Field

[0001] Embodiments of the present disclosure relate to the field of computer technology, and in particular to an application software detection alarm method, device, electronic device, and computer-readable medium. Background Art

[0002] Application software detection alarm is a technology that detects the status of application software and performs early warning operations. At present, when performing application software detection alarm, the commonly used method is: configure the server to monitor the application software running environment and program, detect the running data of the application software, and then issue an alarm when an abnormality occurs.

[0003] However, in practice, it is found that when the above method is used to generate obstacle information, the following technical problems often occur:

[0004] First, different user terminals have different application software installed, which results in the need to deploy different detection environments for each user terminal to access the application software data under the user terminal. Therefore, different detection environments corresponding to many user terminals require more storage space;

[0005] Second, the length of time that the application software on the user terminal changes (for example, software is deleted or newly installed), so the detection environment needs to be readjusted, resulting in untimely application detection, or the application software detection is not comprehensive enough due to the use of unadjusted detection. As a result, it is difficult to issue accurate warning prompts to the application software in a timely manner, which leads to freezes, crashes and freezes during software operation.

[0006] The above information disclosed in this Background section is only for enhancement of understanding of the background of the inventive concept and therefore it may contain information that does not form the prior art that is already known in this country to a person of ordinary skill in the art. Summary of the invention

[0007] The content of this disclosure is used to introduce concepts in a brief form, which will be described in detail in the detailed implementation section below. The content of this disclosure is not intended to identify the key features or essential features of the technical solution claimed for protection, nor is it intended to limit the scope of the technical solution claimed for protection.

[0008] Some embodiments of the present disclosure propose an application software detection alarm method, device, electronic device, and computer-readable medium to solve one or more of the technical problems mentioned in the above background technology section.

[0009] In a first aspect, some embodiments of the present disclosure provide an application software detection alarm method, the method comprising: performing status detection on the application software of each user terminal through a software container deployed on a server to obtain a software detection data set; in response to feedback information of detecting that the user terminal has installed the application software, adding the application tag corresponding to the installed application software in the above feedback information to the software container, and detecting the installed application software through the software container to obtain software detection data, wherein the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format; performing data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the above software data processing result set corresponds to a user terminal to characterize the running data of the user terminal and the running status of each installed application software; for each software data processing result in the above software data processing result set, in response to determining that the above software data processing result meets a preset warning condition, performing an alarm operation on the user terminal and the application software corresponding to the above software data processing result.

[0010] In a second aspect, some embodiments of the present disclosure provide an application software detection alarm device, which includes: a status detection unit, which is configured to perform status detection on the application software of each user terminal through a software container deployed on the server side to obtain a software detection data set; an adding and detecting unit, which is configured to respond to feedback information of detecting that the user terminal has installed the application software, add the application tag corresponding to the installed application software in the above feedback information to the software container, and detect the installed application software through the software container to obtain software detection data, wherein the software container detects each application software installed on the user terminal through the application tag, and before the detection Each user terminal and the corresponding application tag are stored in a preset format; a feature processing unit is configured to perform data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the above software data processing result set corresponds to a user terminal to characterize the operating data of the user terminal and the operating status of each installed application software; an information warning unit is configured to, for each software data processing result in the above software data processing result set, in response to determining that the above software data processing result meets a preset warning condition, perform an alarm operation on the user terminal and application software corresponding to the above software data processing result.

[0011] In a third aspect, some embodiments of the present disclosure provide an electronic device comprising: one or more processors; a storage device on which one or more programs are stored, and when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any implementation manner of the above-mentioned first aspect.

[0012] In a fourth aspect, some embodiments of the present disclosure provide a computer-readable medium having a computer program stored thereon, wherein when the program is executed by a processor, the method described in any implementation manner of the above-mentioned first aspect is implemented.

[0013] The above-mentioned embodiments of the present disclosure have the following beneficial effects: through the application software detection alarm method of some embodiments of the present disclosure, the storage resource occupation of the detection environment can be reduced in the detection alarm process. Specifically, the reason why different detection environments corresponding to many user terminals need to occupy more storage space is that different user terminals install different application software, which leads to the need to deploy different detection environments for each user terminal to access the application software data under the user terminal. Based on this, the application software detection alarm method of some embodiments of the present disclosure first performs status detection on the application software of each user terminal through the software container deployed on the server side to obtain a software detection data set. Here, through the status detection, the status of the application software under each user terminal can be obtained, for example, the memory occupancy status. Then, in response to the feedback information of detecting that the user terminal installs the application software, the application tag corresponding to the installed application software in the above feedback information is added to the software container, and the installed application software is detected through the software container to obtain software detection data. Among them, the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format. Here, the feedback information of the user terminal installing the application software can represent that the user has installed new software. Therefore, by introducing the application tag for detection, the software detection data is obtained. It is not necessary to arrange the corresponding detection environment, but only the application tag is used for detection. Thus, the deployment and application of the detection environment are avoided. Therefore, only storing the application tag can greatly reduce the occupation of storage resources compared with the different detection environments corresponding to many user terminals. Afterwards, data feature processing is performed on each software detection data to generate a software data processing result set. Among them, each software data processing result in the above software data processing result set corresponds to a user terminal to represent the running data of the user terminal and the running status of each installed application software. Here, through data feature processing, it can be used to determine the running status of each application software of each user terminal according to the detected data. Finally, for each software data processing result in the above software data processing result set, in response to determining that the above software data processing result meets the preset warning condition, an alarm operation is performed on the user terminal and application software corresponding to the above software data processing result. Thus, when an application software or user terminal with an abnormal running status is detected, a prompt can be given through an alarm operation. Furthermore, the application software detection alarm method of some embodiments of the present disclosure can reduce the occupation of storage resources while implementing software alarms. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that components and elements are not necessarily drawn to scale.

[0015] Figure 1 is a flow chart of some embodiments of the application software detection alarm method according to the present disclosure;

[0016] Figure 2 is a schematic diagram of the structure of some embodiments of the application software detection alarm device according to the present disclosure;

[0017] Figure 3 It is a schematic diagram of the structure of an electronic device suitable for implementing some embodiments of the present disclosure. DETAILED DESCRIPTION

[0018] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0019] It should also be noted that, for ease of description, only the parts related to the invention are shown in the drawings. In the absence of conflict, the embodiments and features in the embodiments of the present disclosure can be combined with each other.

[0020] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0021] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0022] The names of the messages or information exchanged between multiple devices in the embodiments of the present disclosure are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0023] With regard to the collection, storage, and use of user personal information (for example, user application software data) involved in this disclosure, before performing the corresponding operations, the relevant organizations or individuals shall fulfill obligations including conducting personal information security impact assessments, fulfilling the obligation to inform the personal information subject, and obtaining the authorization and consent of the personal information subject in advance.

[0024] The present disclosure will be described in detail below with reference to the accompanying drawings and in conjunction with embodiments.

[0025] Figure 1 The process 100 of some embodiments of the application software detection alarm method according to the present disclosure is shown. The application software detection alarm method comprises the following steps:

[0026] Step 101 , through the software container deployed on the server, the status of the application software of each user terminal is detected to obtain a software detection data set.

[0027] In some embodiments, the execution subject of the application software detection alarm method can perform status detection on the application software of each user terminal through a software container deployed on the server side in a wired or wireless manner to obtain a software detection data set. Among them, the software container can be a container deployed by the server side for executing tasks. For example, a container (docker) under k8s (kubernetes, a containerized orchestration engine) deployed on the server side. Status detection can be to detect the traffic information of the application software, or it can be to detect the memory usage information of the application software. Each software detection data can correspond to a user terminal to characterize the status information of each application software installed by the user terminal.

[0028] It should be noted that the above-mentioned wireless connection methods may include but are not limited to 3G / 4G connection, WiFi connection, Bluetooth connection, WiMAX connection, Zigbee connection, UWB (ultra wideband) connection, and other wireless connection methods currently known or to be developed in the future.

[0029] In some optional implementations of some embodiments, the execution subject performs status detection on the application software of each user terminal through the software container deployed on the server to obtain the software detection data set, which may include the following steps:

[0030] Based on a preset time interval, the software container pre-deployed on the server establishes a communication connection with the user terminal to pull the running data of each application software of each user terminal as software detection data. Among them, based on a preset time interval (for example, 20 seconds), the communication connection task with the user can be performed through the k8s software container, and the network interface of k8s can be called to establish a communication connection with the user terminal to obtain the running data of each application software on each user terminal. Here, the software detection data may include the traffic usage data (for example, traffic usage), memory usage data (for example, memory percentage), processor usage data (for example, CPU usage percentage), etc. of each application software.

[0031] Step 102, in response to feedback information of detecting that the user terminal has installed application software, adding an application tag corresponding to the installed application software in the feedback information to a software container, and detecting the installed application software through the software container to obtain software detection data.

[0032] In some embodiments, the execution subject may, in response to feedback information of detecting the installation of application software by a user terminal, add the application tag corresponding to the installed application software in the feedback information to the software container, and detect the installed application software through the software container to obtain software detection data. Among them, the software container detects each application software installed by the user terminal through the application tag, and stores each user terminal and the corresponding application tag in a preset format before the detection. Here, the feedback information of the installation of application software by the user terminal may indicate that the user has loaded a new application software on the user terminal. The feedback information may include the user terminal identifier and the application tag of the installed application software. The application tag may include a network address for accessing the application software.

[0033] In some optional implementations of some embodiments, the execution subject, in response to detecting feedback information of the user terminal installing the application software, adds the application tag corresponding to the installed application software in the feedback information to the software container, which may include the following steps:

[0034] The first step is to extract the label of the feedback information to obtain the application label. The application label is used for the communication association between the server and the user terminal to obtain the information of the application software of the user terminal. Secondly, the label information in the feedback information can be extracted as the application label by indexing. Here, the indexing method can be indexing from a pre-labeled fixed position or indexing by a regular expression.

[0035] The second step is to establish a software container corresponding to the above application tag in the server. The software container includes the application tag, which is used to perform communication operations on the application software of the user terminal corresponding to the application tag. Here, the software container can be created using the k8s engine and configured and allocated with a preset amount of memory resources.

[0036] Optionally, in response to detecting feedback information that the user terminal has uninstalled the application software, the application tag pre-stored on the server corresponding to the feedback information is called, and the software container corresponding to the application tag is released to release the process and memory occupied by the software container.

[0037] In some optional implementations of some embodiments, the execution subject detects the installed application software through the software container to obtain software detection data, which may include the following steps:

[0038] The first step is to establish a communication connection between the software container and the user terminal, wherein the software container can be run, and the communication connection can be established using the application programming interface of the server to establish the network address included in the software container application label.

[0039] In the second step, in response to determining that the application software installed by the user terminal is started, the software running data of the application software is pulled as software detection data. Among them, the startup of the application software installed by the user terminal can represent that the user terminal starts the application software. When the application software is not started, no detection of the application software may be performed. Secondly, the software running data of the application software can be pulled according to the established communication connection interface. The port of the software container can also be forwarded to the user terminal so that the data of the application program can be obtained through the port of the user terminal.

[0040] Step 103: perform data feature processing on each software detection data to generate a software data processing result set.

[0041] In some embodiments, the execution subject may perform data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the software data processing result set may correspond to a user terminal to characterize the operation data of the user terminal and the operation status of each installed application software.

[0042] In some optional implementations of some embodiments, the execution subject performs data feature processing on each software detection data to generate a software data processing result set, including:

[0043] For the software detection data corresponding to each user terminal, perform the following steps:

[0044] In the first step, the total memory usage, total processor usage and total traffic usage are extracted from the above software detection data, as well as the memory usage, processor usage and traffic usage at continuous time points corresponding to each application software, and the memory usage sequence, processor usage sequence and traffic usage sequence corresponding to each application software are obtained. Among them, continuous time points are multiple time points with the same interval within a period of time.

[0045] In the second step, the memory occupancy sequence, processor occupancy sequence and traffic usage sequence corresponding to each application software are added to the pre-built timeline to generate a memory occupancy line chart group, a processor occupancy line chart group and a traffic usage line chart group. Among them, the timeline can be an axis with time as the scale. Here, each memory occupancy, processor occupancy and traffic usage can have a corresponding time point, so that they can be added to the timeline according to the time point, and the vertical axis is the specific memory occupancy, processor occupancy or traffic usage The corresponding value. Finally, the added vertical axis scale values ​​can be drawn into a line graph in the order of the timeline to obtain a memory occupancy line chart group, a processor occupancy line chart group and a traffic usage line chart group.

[0046] The third step is to determine the single-point memory growth rate sequence and the total memory growth rate of the memory occupancy line graph for each memory occupancy line graph in the above-mentioned memory occupancy line graph group. Among them, the single-point memory growth rate in the above-mentioned single-point memory growth rate sequence represents the growth rate of two adjacent memory occupancy rates in the memory occupancy line graph, and the above-mentioned total memory growth rate represents the growth rate between the last memory occupancy rate and the first memory occupancy rate in the memory occupancy line graph. Here, each single-point memory growth rate sequence can correspond to an application software to represent the changing state of the memory usage ratio of the application software over a period of time. The single-point memory growth rate can represent the change in memory usage of the application software at two adjacent time points. The total memory growth rate can represent the change in memory usage of the application software before and after a period of time.

[0047] In the fourth step, in response to the existence of application software whose single-point memory growth rate or total memory growth rate is greater than the preset memory growth rate threshold, the information characterizing the excess memory occupancy is determined as the application memory processing information corresponding to the above application software. Among them, the single-point memory growth rate or the total memory growth rate is greater than the preset memory growth rate threshold, which can indicate that the memory occupancy of the application software has changed greatly over a period of time, and there is a situation of excess memory occupancy. Therefore, the information characterizing the excess memory occupancy can be determined as the application memory processing information corresponding to the above application software. In addition, if there is an application software whose single-point memory growth rate or total memory growth rate is less than or equal to the preset memory growth rate threshold, it can be determined as a normally running application. Therefore, the information characterizing that the memory occupancy is not excessive or the empty information is determined as the application memory processing information corresponding to the above application software.

[0048] The fifth step is to determine the single-point processor growth rate sequence and the total processor growth rate of the processor occupancy line graph for each processor occupancy line graph in the processor occupancy line graph group. The single-point processor growth rate in the single-point processor growth rate sequence represents the growth rate of two adjacent processor occupancy rates in the processor occupancy line graph, and the total processor growth rate represents the growth rate between the last processor occupancy rate and the first processor occupancy rate in the processor occupancy line graph. Each single-point processor growth rate sequence can correspond to an application software to represent the changing state of the processor usage ratio of the application software over a period of time. The single-point processor growth rate can represent the change in the processor usage ratio of the application software at two adjacent time points. The total processor growth rate can represent the change in the processor usage of the application software before and after a period of time.

[0049] In the sixth step, in response to the existence of application software whose single-point processor growth rate or total processor growth rate is greater than the preset processor growth rate threshold, the information characterizing the excess processor occupancy is determined as the application processor processing information corresponding to the above application software. Among them, the single-point processor growth rate or total processor growth rate being greater than the preset processor growth rate threshold can indicate that the processor occupancy of the application software has changed greatly over a period of time, and there is a situation of excess processor occupancy. Therefore, the information characterizing the excess processor occupancy can be determined as the application processor processing information corresponding to the above application software. In addition, if there is an application software whose single-point processor growth rate or total processor growth rate is less than or equal to the preset processor growth rate threshold, it can be determined as a normally running application. Therefore, the information characterizing that the processor occupancy is not excessive or the empty information is determined as the application processor processing information corresponding to the above application software.

[0050] The seventh step is to determine the single-point traffic growth rate sequence and the total traffic growth rate of the traffic usage line graph for each traffic usage line graph in the traffic usage line graph group. Among them, the single-point traffic growth rate in the single-point traffic growth rate sequence represents the growth rate of two adjacent traffic usages in the traffic usage line graph, and the total traffic growth rate represents the growth rate between the last traffic usage and the first traffic usage in the traffic usage line graph. Secondly, each single-point traffic growth rate sequence can correspond to an application software to represent the changing state of the traffic usage proportion of the application software over a period of time. The single-point traffic growth rate can represent the change in the processor usage proportion of the application software at two adjacent time points. The total traffic growth rate can represent the change in traffic usage of the application software before and after a period of time.

[0051] In the eighth step, in response to the existence of application software whose single-point traffic growth rate or total traffic growth rate is greater than the preset traffic growth rate threshold, the information characterizing the excess of traffic growth rate is determined as the application traffic processing information corresponding to the above application software. Among them, the single-point traffic growth rate or total traffic growth rate being greater than the preset traffic growth rate threshold can indicate that the application software has a large traffic usage over a period of time and there is a situation of excess traffic usage. Therefore, the information characterizing the excess of traffic growth rate can be determined as the application traffic processing information corresponding to the above application software. In addition, if there is an application software whose single-point traffic growth rate or total traffic growth rate is less than or equal to the preset traffic growth rate threshold, it can be determined as a normal operating application. Therefore, the information characterizing that the traffic usage is not exceeded or the empty information is determined as the application traffic processing information corresponding to the above application software.

[0052] In step 9, in response to determining that the total memory usage, the total processor usage, or the total traffic usage exceeds the corresponding threshold, the information of the excess total memory usage, the total processor usage, or the total traffic usage is determined as user terminal processing information. The total memory usage, the total processor usage, or the total traffic usage are all pre-set with corresponding thresholds to determine whether to generate user terminal processing information. Here, the user terminal processing information can represent application software with abnormal application status.

[0053] In the tenth step, the application memory processing information, the application processor processing information, the application traffic processing information and the user terminal processing information are determined as software data processing results.

[0054] Optionally, a traffic anomaly detection may be performed on the traffic usage of each application software at consecutive time points through a pre-trained network traffic model to obtain a traffic anomaly detection result. The traffic usage of each application software at consecutive time points may be combined into a traffic vector in chronological order. Then, the traffic vector is input into the pre-trained network traffic model to obtain a traffic anomaly detection result. The traffic anomaly detection result may include a detection label characterizing traffic anomaly or normal traffic. Finally, the traffic anomaly detection result may be added to the software data processing result.

[0055] In practice, the network traffic model can be a decision tree model, which can be trained using a pre-established sample set. Specifically, each sample in the sample set can include a sample traffic usage vector and a corresponding traffic sample label. The sample traffic usage vector can be composed of historical traffic usage over a period of time during actual traffic usage. The traffic sample label can be a traffic anomaly level label pre-calibrated according to the traffic conditions. The traffic anomaly level label can be divided into multiple levels. For example, it is divided into three levels: normal traffic label, primary traffic anomaly label, and severe traffic anomaly label. Here, the traffic anomaly can be divided into three traffic intervals according to two pre-set traffic thresholds, corresponding to the three levels from small to large.

[0056] Step 104 , for each software data processing result in the software data processing result set, in response to determining that the software data processing result meets a preset warning condition, an alarm operation is performed on the user terminal and application software corresponding to the software data processing result.

[0057] In some embodiments, the execution subject may, for each software data processing result in the software data processing result set, perform an alarm operation on the user terminal and application software corresponding to the software data processing result in response to determining that the software data processing result satisfies a preset warning condition. The warning condition may be that the software data processing result includes application memory processing information characterizing excessive memory usage, application processor processing information characterizing excessive processor usage, application traffic processing information characterizing excessive traffic growth rate usage, or user terminal processing information, or a traffic anomaly detection result characterizing traffic anomaly (e.g., including a primary traffic anomaly tag and a severe traffic anomaly tag).

[0058] In some optional implementations of some embodiments, the execution subject, in response to determining that the software data processing result meets a preset warning condition, performs an alarm operation on the user terminal and application software corresponding to the software data processing result, which may include the following steps:

[0059] In response to determining that the application memory processing information, application processor processing information, application traffic processing information or user terminal processing information included in the software data processing result meets the preset warning condition, an alarm operation is performed on the user terminal and application software corresponding to the software data processing result. Among them, the alarm operation of the application memory processing information, the application processor processing information and the application traffic processing information is an alarm operation for each application. The alarm operation of the user terminal processing information is an alarm operation for the user terminal.

[0060] In practice, the alarm operation can be an alarm operation for a user terminal or an alarm operation for an application software. For example, if the software data processing result includes user terminal processing information, then an alarm operation can be issued for the user terminal. If the traffic anomaly detection result corresponding to an application software in the software data processing result includes a severe traffic anomaly label, then an alarm operation can be performed simultaneously within the application software and the user terminal.

[0061] As an example, the alarm operation may include but is not limited to at least one of the following: email reminder, SMS reminder, application software internal information reminder, etc.

[0062] The above steps 102 to 104 and their related contents, as an inventive point of an embodiment of the present disclosure, solve the second technical problem mentioned in the background technology: "The application software duration of the user terminal changes (for example, the software is deleted or newly installed), so it is necessary to readjust the detection environment, so that the application detection is not timely, or the application software detection is not comprehensive enough due to the use of unadjusted detection, thus, it is difficult to issue accurate warning prompts to the application software in time, thereby causing the software to freeze, crash and freeze when the software is running." The factors that cause the software to freeze, crash and freeze when it is running are often as follows: the application software duration of the user terminal changes (for example, the software is deleted or newly installed), so it is necessary to readjust the detection environment, so that the application detection is not timely, or the application software detection is not comprehensive enough due to the use of unadjusted detection, thus, it is difficult to issue accurate warning prompts to the application software in time. If the above factors are solved, accurate warning prompts can be issued to the application software in time to reduce the occurrence of freezes, crashes and freezes when the software is running. In order to achieve this effect, first, when software deletion or new software installation is detected, the application software of the user terminal can be detected in time through the application tag. This improves the detection efficiency. Then, for the uninstalled application software, the corresponding software container can be cleared in time on the server to release memory. After that, by detecting the total memory usage, total processor usage and total traffic usage of the application software, as well as the memory usage, processor usage and traffic usage of each application software at continuous time points, the usage status of each application software and the user terminal can be determined. Therefore, it is easy to determine whether there is an abnormality in the use of the application software. At the same time, the traffic consumption of the application software can be further monitored through the network traffic model. Thus, an alarm prompt is issued to the user terminal and the application software in time. In addition, the failure of freezing, crashing and freezing during software operation is reduced.

[0063] Optionally, the above execution entity may further perform the following steps:

[0064] The first step is to record the user terminal and application software identifiers corresponding to each software data processing result that meets the preset warning conditions, and obtain the target user terminal identifier group and the target application software identifier group. Among them, the user terminal and application software identifiers corresponding to each software data processing result that meets the preset warning conditions can be used to mark the abnormal records of the application software.

[0065] The second step is to generate user terminal prompt information or application software prompt information based on the above-mentioned target user terminal identification group and the above-mentioned target application software identification group, and send the above-mentioned user terminal prompt information or the above-mentioned application software prompt information to the corresponding user terminal or the corresponding application software server. Among them, firstly, the number of records of each target user terminal identification can be determined. If the number is greater than the preset number, multiple abnormal prompts are issued to the target user terminal. For example, the information of "multiple memory usage exceeds the standard". The number of records of each target application software identification can also be determined. If the number is greater than the preset number, common abnormal prompts of the target application software can be issued to all user terminals. For example, the prompt information of "the target reference software processing resources are occupied by a large amount". In addition, the abnormal records of each user terminal, as well as the above-mentioned memory usage line chart group, processor usage line chart group and traffic usage line chart group and other information can also be recorded and visualized on the server.

[0066] The above-mentioned embodiments of the present disclosure have the following beneficial effects: through the application software detection alarm method of some embodiments of the present disclosure, the storage resource occupation of the detection environment can be reduced in the detection alarm process. Specifically, the reason why different detection environments corresponding to many user terminals need to occupy more storage space is that different user terminals install different application software, which leads to the need to deploy different detection environments for each user terminal to access the application software data under the user terminal. Based on this, the application software detection alarm method of some embodiments of the present disclosure first performs status detection on the application software of each user terminal through the software container deployed on the server side to obtain a software detection data set. Here, through the status detection, the status of the application software under each user terminal can be obtained, for example, the memory occupancy status. Then, in response to the feedback information of detecting that the user terminal installs the application software, the application tag corresponding to the installed application software in the above feedback information is added to the software container, and the installed application software is detected through the software container to obtain software detection data. Among them, the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format. Here, the feedback information of the user terminal installing the application software can represent that the user has installed new software. Therefore, by introducing the application tag for detection, the software detection data is obtained. It is not necessary to arrange the corresponding detection environment, but only the application tag is used for detection. Thus, the deployment and application of the detection environment are avoided. Therefore, only storing the application tag can greatly reduce the occupation of storage resources compared with the different detection environments corresponding to many user terminals. Afterwards, data feature processing is performed on each software detection data to generate a software data processing result set. Among them, each software data processing result in the above software data processing result set corresponds to a user terminal to represent the running data of the user terminal and the running status of each installed application software. Here, through data feature processing, it can be used to determine the running status of each application software of each user terminal according to the detected data. Finally, for each software data processing result in the above software data processing result set, in response to determining that the above software data processing result meets the preset warning condition, an alarm operation is performed on the user terminal and application software corresponding to the above software data processing result. Thus, when an application software or user terminal with an abnormal running status is detected, a prompt can be given through an alarm operation. Furthermore, the application software detection alarm method of some embodiments of the present disclosure can reduce the occupation of storage resources while implementing software alarms.

[0067] Further references Figure 2 As an implementation of the methods shown in the above figures, the present disclosure provides some embodiments of an application software detection alarm device. These device embodiments are similar to Figure 1Corresponding to the method embodiments shown, the device can be specifically applied to various electronic devices.

[0068] like Figure 2 As shown, the application software detection and alarm device 200 of some embodiments includes: a state detection unit 201, an adding and detection unit 202, a feature processing unit 203 and an information warning unit 204. Among them, the state detection unit 201 is configured to perform state detection on the application software of each user terminal through the software container deployed on the server side to obtain a software detection data set; the adding and detecting unit 202 is configured to respond to the feedback information of detecting the installation of the application software by the user terminal, add the application tag corresponding to the installed application software in the above feedback information to the software container, and detect the installed application software through the software container to obtain software detection data, wherein the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format; the feature processing unit 203 is configured to perform data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the above software data processing result set corresponds to a user terminal to characterize the running data of the user terminal and the running status of each installed application software; the information warning unit 204 is configured to perform an alarm operation on the user terminal and the application software corresponding to the above software data processing result in response to determining that the above software data processing result meets the preset warning condition.

[0069] It is understood that the units described in the device 200 are similar to those described in the reference Figure 1 Therefore, the operations, features and beneficial effects described above for the method are also applicable to the device 200 and the units included therein, and will not be described in detail here.

[0070] Reference below Figure 3 , which shows a structural schematic diagram of an electronic device (eg, a computing device) 300 suitable for implementing some embodiments of the present disclosure. Figure 3 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0071] like Figure 3As shown, the electronic device 300 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 301, which can perform various appropriate actions and processes according to a program stored in a read-only memory 302 or a program loaded from a storage device 308 into a random access memory 303. Various programs and data required for the operation of the electronic device 300 are also stored in the random access memory 303. The processing device 301, the read-only memory 302, and the random access memory 303 are connected to each other via a bus 304. An input / output interface 305 is also connected to the bus 304.

[0072] Typically, the following devices may be connected to the I / O interface 305: input devices 306 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; output devices 307 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 308 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 309. The communication devices 309 may allow the electronic device 300 to communicate with other devices wirelessly or by wire to exchange data. Although Figure 3 The electronic device 300 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead. Figure 3 Each block shown in the figure may represent one device, or may represent multiple devices as required.

[0073] In particular, according to some embodiments of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, some embodiments of the present disclosure include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In some such embodiments, the computer program can be downloaded and installed from the network through the communication device 309, or installed from the storage device 308, or installed from the read-only memory 302. When the computer program is executed by the processing device 301, the above-mentioned functions defined in the method of some embodiments of the present disclosure are executed.

[0074] It should be noted that the computer-readable medium recorded in some embodiments of the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In some embodiments of the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In some embodiments of the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0075] In some embodiments, the client and the server may communicate using any currently known or future developed network protocol such as HTTP (Hyper Text Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0076] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device. The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: performs status detection on the application software of each user terminal through the software container deployed on the server side to obtain a software detection data set; in response to feedback information of detecting that the user terminal has installed the application software, adds the application tag corresponding to the installed application software in the feedback information to the software container, and detects the installed application software through the software container to obtain software detection data, wherein the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format; performs data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the software data processing result set corresponds to a user terminal to characterize the running data of the user terminal and the running status of each installed application software; for each software data processing result in the software data processing result set, in response to determining that the software data processing result meets the preset warning condition, performs an alarm operation on the user terminal and the application software corresponding to the software data processing result.

[0077] Computer program code for performing the operations of some embodiments of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0078] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0079] The units described in some embodiments of the present disclosure may be implemented by software or by hardware. The units described may also be provided in a processor, for example, may be described as: a processor including a state detection unit, an addition and detection unit, a feature processing unit, and an information warning unit. The names of these units do not, in some cases, constitute limitations on the units themselves, for example, the information warning unit may also be described as "a unit that performs alarm operations on user terminals and application software corresponding to software data processing results".

[0080] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0081] The above descriptions are only some preferred embodiments of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the embodiments of the present disclosure is not limited to the technical solutions formed by a specific combination of the above-mentioned technical features, but should also cover other technical solutions formed by any combination of the above-mentioned technical features or their equivalent features without departing from the above-mentioned inventive concept. For example, the above-mentioned features are replaced with the technical features with similar functions disclosed in the embodiments of the present disclosure (but not limited to) and the technical solutions formed.

Claims

1. A method for detecting and warning application software, include: Through the software container deployed on the server, the status of the application software of each user terminal is detected to obtain the software detection data set; In response to feedback information of detecting that the user terminal has installed application software, adding an application tag corresponding to the installed application software in the feedback information to a software container, and detecting the installed application software through the software container to obtain software detection data, wherein the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format; Performing data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the software data processing result set corresponds to a user terminal to characterize the operation data of the user terminal and the operation status of each installed application software; For each software data processing result in the software data processing result set, in response to determining that the software data processing result meets a preset warning condition, an alarm operation is performed on a user terminal and application software corresponding to the software data processing result.

2. The method according to claim 1, in, The method further comprises: Record the user terminal and application software identifiers corresponding to each software data processing result that meets the preset warning condition, and obtain a target user terminal identifier group and a target application software identifier group; Based on the target user terminal identification group and the target application software identification group, user terminal prompt information or application software prompt information is generated, and the user terminal prompt information or the application software prompt information is sent to the corresponding user terminal or the corresponding application software server.

3. The method according to claim 1, in, The software container deployed on the server side performs status detection on the application software of each user terminal to obtain a software detection data set, including: Based on a preset time interval, the running data of each application software of each user terminal is pulled as software detection data through the communication connection established between the software container pre-deployed on the server and the user terminal.

4. The method according to claim 1, in, In response to detecting feedback information of the user terminal installing the application software, adding the application tag corresponding to the installed application software in the feedback information to the software container includes: Extracting tags from the feedback information to obtain application tags, wherein the application tags are used for communication association between the server and the user terminal to obtain information about application software of the user terminal; A software container corresponding to the application tag is established in the server, wherein the software container includes the application tag for performing a communication operation on the application software of the user terminal corresponding to the application tag.

5. The method according to claim 1, in, The detecting the installed application software through the software container to obtain software detection data includes: Establishing a communication connection between the software container and the user terminal; In response to determining that the application software installed in the user terminal is started, software running data of the application software is pulled as software detection data.

6. The method according to claim 1, in, In response to determining that the software data processing result meets a preset warning condition, performing an alarm operation on a user terminal and application software corresponding to the software data processing result, including: In response to determining that the application memory processing information, application processor processing information, application traffic processing information or user terminal processing information included in the software data processing result meets the preset warning conditions, an alarm operation is performed on the user terminal and application software corresponding to the software data processing result, wherein the alarm operation of the application memory processing information, the application processor processing information and the application traffic processing information is an alarm operation for each application, and the alarm operation of the user terminal processing information is an alarm operation for the user terminal.

7. An application software detection alarm device, include: The state detection unit is configured to perform state detection on the application software of each user terminal through the software container deployed on the server side to obtain a software detection data set; an adding and detecting unit, configured to, in response to feedback information of detecting that the user terminal has installed application software, add an application tag corresponding to the installed application software in the feedback information to the software container, and detect the installed application software through the software container to obtain software detection data, wherein the software container detects each application software installed by the user terminal through the application tag, and before the detection, each user terminal and the corresponding application tag are stored in a preset format; a feature processing unit configured to perform data feature processing on each software detection data to generate a software data processing result set, wherein each software data processing result in the software data processing result set corresponds to a user terminal to characterize the operation data of the user terminal and the operation status of each installed application software; The information warning unit is configured to, for each software data processing result in the software data processing result set, in response to determining that the software data processing result meets a preset warning condition, perform an alarm operation on the user terminal and application software corresponding to the software data processing result.

8. An electronic device, include: one or more processors; a storage device having one or more programs stored thereon, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 6.

9. A computer readable medium having a computer program stored thereon, in, When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images